CVE-2019-189046.5MediumCWE-400

CVE-2019-18904: Migrations requests can cause DoS on rmt

SUSE · SUSE Linux Enterprise High Performance Computing 15-ESPOS

Vendor fix available · Affected: SUSE Linux Enterprise High Performance Computing 15-ESPOS · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.6%probability of exploitation in the next 30 days

75th percentile

050100

Higher than 75% of scored CVEs

6.5MediumCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

A Uncontrolled Resource Consumption vulnerability in rmt of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Public Cloud 15-SP1, SUSE Linux Enterprise Module for Server Applications 15, SUSE Linux Enterprise Module for Server Applications 15-SP1, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1 allows remote attackers to cause DoS against rmt by requesting migrations. This issue affects: SUSE Linux Enterprise High Performance Computing 15-ESPOS rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise High Performance Computing 15-LTSS rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise Module for Public Cloud 15-SP1 rmt-server versions prior to 2.5.2-3.9.1. SUSE Linux Enterprise Module for Server Applications 15 rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise Module for Server Applications 15-SP1 rmt-server versions prior to 2.5.2-3.9.1. SUSE Linux Enterprise Server 15-LTSS rmt-server versions prior to 2.5.2-3.26.1. SUSE Linux Enterprise Server for SAP 15 rmt-server versions prior to 2.5.2-3.26.1. openSUSE Leap 15.1 rmt-server versions prior to 2.5.2-lp151.2.9.1.

Affected products8

From the CVE record. A product or version that is not listed is unknown, not unaffected.

SUSE · SUSE Linux Enterprise High Performance Computing 15-ESPOSfrom rmt-server before 2.5.2-3.26.1
SUSE · SUSE Linux Enterprise High Performance Computing 15-LTSSfrom rmt-server before 2.5.2-3.26.1
SUSE · SUSE Linux Enterprise Module for Public Cloud 15-SP1from rmt-server before 2.5.2-3.9.1
SUSE · SUSE Linux Enterprise Module for Server Applications 15from rmt-server before 2.5.2-3.26.1
SUSE · SUSE Linux Enterprise Module for Server Applications 15-SP1from rmt-server before 2.5.2-3.9.1
SUSE · SUSE Linux Enterprise Server 15-LTSSfrom rmt-server before 2.5.2-3.26.1
SUSE · SUSE Linux Enterprise Server for SAP 15from rmt-server before 2.5.2-3.26.1
openSUSE · openSUSE Leap 15.1from rmt-server before 2.5.2-lp151.2.9.1

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Uncontrolled Resource Consumption · Denial of Service
Vendor: SUSE
Published: April 2020
Band: Possible (1 to 10%), April 2020

CoverageNo articles yet

No CyberSIXT article names CVE-2019-18904 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.